dotfiles/apps/base/prometheus-ssl-exporter/deployment.yaml

apiVersion: apps/v1
kind: Deployment
metadata:
  name: ssl-exporter
spec:
  selector:
    matchLabels:
      app.kubernetes.io/name: ssl-exporter
      app.kubernetes.io/part-of: ssl-exporter
  template:
    metadata:
      labels:
        app.kubernetes.io/name: ssl-exporter
        app.kubernetes.io/part-of: ssl-exporter
    spec:
      containers:
      - image: ribbybibby/ssl-exporter:2.4.2
        args:
        - --config.file=/config/config.yaml
        name: ssl-exporter
        ports:
        - containerPort: 9219
          name: http
          protocol: TCP
        resources:
          limits:
            cpu: 100m
            memory: 64Mi
          requests:
            cpu: 100m
            memory: 64Mi
        securityContext:
          capabilities:
            drop:
            - ALL
          readOnlyRootFilesystem: true
          allowPrivilegeEscalation: false
          runAsNonRoot: true
          runAsUser: 9219
          runAsGroup: 9219
        volumeMounts:
        - name: config
          mountPath: /config
      serviceAccountName: ssl-exporter
      volumes:
      - name: config
        configMap:
          name: ssl-exporter